Threats tagged 'ghsa-ghw9-6h55-qj7v'

CVE-2024-42152 is a medium severity vulnerability in the Linux kernel's nvmet subsystem. It involves a possible resource leak when destroying a controller during queue pair (qp) establishment due to a race condition. This occurs when the client disconnects concurrently with the admin connect command, preventing the final release of the controller reference. The issue was observed in environments with many hosts connecting multiple controllers simultaneously. A fix has been implemented to re-capture the controller reference after all inflight requests complete, ensuring proper cleanup.